Research And Design Of Public Key Security Infrastructure In Campus Network Environment

The main content of my paper is PKI(Public Key Infrastructure),This techonology is based on dissymmetry and at the same time it adopt the third field certificate authority to announce digital cerfification.So that it can provide Encryption,Digital Signature and the service seurity of safty for all the internet.As our modern campuses's internet almost use password confirmation and fire wall. These are all cannot deal with all kinds of threaten of security which happens often. This paper will trying to attempt to found PKI system amony our campuses. It can not only provide us digital security, completion, Idnumber distinguishment and resist deny service, but also support new points during the process of designing which is based on the characteristic of our campuses'internet.The paper is divided into two parts. The first part is almost introduce PKI system's theory and technic. For the whole paper, firstly it introduce the background and the situation of PKI around the world.The reason is to ensure the subjiect which we are researching. Secondlly, it introduced the basic knowledge of Public key system and the study of cipher in details. These study include the theory of Public Key technology and the basic of mathematics. And it also include some methods of Public Key Encryption and Digital Signature. Finally,there is concerned with the discussion of PKI. The expression of the definition of Digital Certification. And next is to show every PKI system's security service subjects.Before constructing the PKI system, as abasic definition -trust model,,there's some chapter to study it in this paper. It also analysis all kinds of trust model. The last part of the paper is to design how to use it in practical. According to what I have known about PKI system, with the character of our campus surrounding, I made a pair of campus internet PKI system(including trust model,the defence of certificate authority protection policy, the manage process of system certification), and at the same time I adopt OpenSSL which is so advanced in modern time to finish the system's function partly.Figure [24] Table [2] Reference [51]...